Privacy policy

Generic GDPR-oriented template. Replace the bracketed placeholders with real data before publishing the site.

1. Data controller

[NAME OR LEGAL ENTITY], address [ADDRESS], contact email [CONTACT EMAIL].

2. Data we process

• Your email address, to identify you and send you the access code.
• The recipient email addresses you provide when scheduling a message.
• The subject, body, and attachments of the messages you schedule.
• IP address and timestamps, for security and abuse-prevention purposes.

3. Purpose

To allow passwordless access via a one-time code, and to schedule and send email messages on the date chosen by the user.

4. Legal basis

Performance of the service requested by the user (GDPR art. 6.1.b).

5. Encryption and security

Message content (subject, body, recipients, and attachments) is stored encrypted in the database using application-level encryption, so direct access to the database does not reveal it in plain text. The service's admin panel has no access to this content, only to aggregate data (message counts, dates, statuses).

6. Recipients of the data

Data is not shared with third parties except where legally required. Emails are sent through the contracted hosting/SMTP provider.

7. Retention

Data is kept while the account is active and while there are scheduled or sent messages associated with it.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to [CONTACT EMAIL].